jackyu66gitandCursor
62cd8c45dd
Ask/catalog 权限与审计加固、量表读权限统一，以及未提交的 ops hardening 变更。 Co-authored-by: Cursor <cursoragent@cursor.com>
43 lines
1.2 KiB
Markdown
43 lines
1.2 KiB
Markdown
# Feature Spec: ExploreConfig · ScaleDefinition（Ops · ECR-040）
|
||
|
||
> Status: `Active`（Loop continuous · **ECR-040 Closed**）
|
||
> Parent: WAVE0-FROZEN · Predecessor: ECR-039 Closed
|
||
> Capability: `ExploreConfig` · BC: `Explore_Reports`
|
||
> 授权：`docs/WAVE0/LOOP_AUTHORIZATION.md`
|
||
|
||
## Non-goals
|
||
|
||
PATCH status（已有 content.write）· 题干编辑 · UGC · 真支付
|
||
|
||
## L2 Domain
|
||
|
||
| 概念 | 语义 |
|
||
|------|------|
|
||
| `ScaleDefinition` | 本切片只读目录；code 唯一（若适用） |
|
||
|
||
## L3 API
|
||
|
||
| Method | Path | 权限 | 语义 |
|
||
|--------|------|------|------|
|
||
| GET | `/admin/explore/scales` | `admin.explore.read` 或 `admin.content.write` | 只读 |
|
||
| GET | `/admin/explore/scales/{id}` | `admin.explore.read` 或 `admin.content.write` | 只读 |
|
||
| GET | `/admin/scales` | `admin.explore.read` 或 `admin.content.write` | 只读（与 explore 同源） |
|
||
|
||
## Migration
|
||
|
||
Migration NO：复用 `scales` 表只读投影
|
||
|
||
## L4 AC
|
||
|
||
| ID | Then |
|
||
|----|------|
|
||
| AC-F-01 | list 含种子或空列表合法 |
|
||
| AC-F-02 | 已知 id get 200 |
|
||
| AC-F-03 | 未知 id → 404 |
|
||
| AC-S-01 | 无 Admin → 401 |
|
||
| AC-S-02 | 无权限 → 403 |
|
||
| AC-P-01 | list < 500ms |
|
||
| AC-O-01 | N/A 只读 |
|
||
|
||
contract_diff: `docs/CONTRACT_DIFF/ECR-040.yaml`
|